Privacy Policy

Hakkens Trading, trading as ShipCore, is the controller for the personal data described here. We are established in the Netherlands, so the EU General Data Protection Regulation (GDPR) applies and no EU representative is required.

shipcore.io has no accounts, no contact form and no analytics or advertising scripts. We set no cookies. The site is hosted on Cloudflare Pages; Cloudflare processes your IP address and request headers to deliver the pages and protect against abuse, and keeps short-lived technical logs for that purpose. See Cloudflare's privacy policy.

The pages load fonts from Google Fonts and an icon stylesheet from cdnjs (Cloudflare). Your browser sends its IP address to those services when it fetches the files. We do not receive anything from them.

If you write to hello@shipcore.io, we keep your email address, name and the correspondence for as long as needed to answer and follow up, and for up to two years after the last message so we can pick up the thread later. Legal basis: our legitimate interest in answering you, or the steps needed before entering into a contract.

What we keep

• Business name, contact name, address, email, phone and VAT number.
• Quotes, agreements, invoices, payment status and project correspondence.
• Access details you give us for the assignment (for example a hosting or Shopify account), used only for that assignment and removed when it ends.

Why

To perform the contract with you (legal basis: contract) and to meet our bookkeeping duties (legal basis: legal obligation). Dutch tax law requires us to keep administrative records, including invoices, for seven years.

Payments

Payments by card or online are handled by a payment provider such as Stripe or Lemon Squeezy. They receive the data needed to process the payment, such as your name, email, billing address and card details. We never see or store full card numbers; we receive a confirmation, the amount and the billing details for our invoice.

Each product processes its own data and has its own privacy policy, published on that product's website or app-store listing. Those policies describe what the product collects and which processors it uses. This document only covers shipcore.io and our direct dealings with you.

We use a small number of service providers that process data on our behalf under a data processing agreement: Cloudflare (hosting and email routing), our email provider, our bookkeeping software and the payment providers named above. Some of them are established outside the EEA; transfers rely on the EU Standard Contractual Clauses or an adequacy decision. We do not sell personal data and we do not share it for advertising.

• Email correspondence: up to two years after the last message.
• Quotes that did not become an assignment: one year.
• Contracts, invoices and payment records: seven years (Dutch tax law).
• Access details for an assignment: removed when the assignment ends.

You can ask us to access, correct, delete or export your personal data, to restrict or object to its processing, and you can withdraw consent where processing is based on consent. Email hello@shipcore.io and we answer within one month. If you think we handle your data unlawfully you can complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens, or to the authority in your own country.

We update this policy when our practices or the law change, and revise the date at the top. The Terms of Service and Refund policy complete this document.